I think they should allow unsigned apps to run in a similar way to developer mode on the Xbox.

You can enable unsigned apps, but you'll loose Apple services (e.g. iMessage). This should be enough to convince normal users not to do it, but allow those who really want to do it, to do it.